lfiedoro

Decrypt LUKS volumes with a TPM on Fedora Linux

This guide allows you to use the TPM on your computer to decrypt your LUKS encrypted volumes. If you are worried about a cold boot attack on your hardware please DO NOT use this guide with your root volume!

Preflight Checks

Verify that you have a TPM in your computer:

# systemd-cryptenroll --tpm2-device=list
PATH DEVICE DRIVER

lfiedoro

{
   "feed":{
      "Leaders":"http://www.economist.com/feeds/print-sections/69/leaders.xml",
      "Briefing":"http://www.economist.com/feeds/print-sections/102/briefings2.xml",
      "Special report":"http://www.economist.com/feeds/print-sections/103/special-reports.xml",
      "Britain":"http://www.economist.com/feeds/print-sections/76/britain.xml",
      "Europe":"http://www.economist.com/feeds/print-sections/75/europe.xml",
      "United States":"http://www.economist.com/feeds/print-sections/71/united-states.xml",
      "The Americas":"http://www.economist.com/feeds/print-sections/72/the-americas.xml",
      "Middle East and Africa":"http://www.economist.com/feeds/print-sections/99/middle-east-africa.xml",

lfiedoro

Warning

This is a tutorial from 2016, originally for installing debian jessie, it may work for newer versions of debian, but I haven't check it (however, it should mostly work because not that much changed since then). You may want to change every occurrence of buster to a name of a new version of debian.

Install debootstrap

Make work directory:

mkdir work
cd work